Cursor quickstart

Cursor’s Agent mode can already touch every file in your repo. Add AgentValet as its MCP server and you decide what happens next: which branches it can push, which records it can update, which channels it can post to. A read-only scope stays read-only even if the agent tries to write.

Requirements

Cursor installed
Node.js 18 or later
An AgentValet account. You don’t need to create one up front, the CLI signs you in via your browser the first time you run it.

Set up

Run this in your project directory:


npx @agentvalet/register

Your browser opens to sign in (or sign up, it’s free). Once you authorise, the CLI generates an RS256 keypair, registers the agent, and writes the MCP entry. By default that’s ~/.cursor/mcp.json (user-scoped, one config across every Cursor project, no restart-and-trust dance). Pass --project if you’d rather scope it to just this repo, that writes .cursor/mcp.json in the project directory instead.

The private key is written to .agentvalet/agent.key in the project directory, with a .gitignore entry added automatically.

Restart Cursor (or open the MCP settings panel) and you should see agentvalet listed as connected. Approve the agent in the dashboard , it starts deny-by-default with no scopes until you grant some.

Prefer to wire it up by hand?


{
  "mcpServers": {
    "agentvalet": {
      "command": "npx",
      "args": ["-y", "@agentvalet/register", "mcp-server"]
    }
  }
}

You’ll still want to run npx @agentvalet/register once so the CLI has somewhere to store the agent’s private key.

Alternative: connect over OAuth

Cursor supports Streamable HTTP MCP servers directly. Add this in Cursor’s MCP settings:


{
  "mcpServers": {
    "agentvalet": {
      "url": "https://api.agentvalet.ai/mcp/v1/<your-owner-id>"
    }
  }
}

Cursor shows a “Needs login” button next to AgentValet. Click it, approve the OAuth consent in your browser, and the agent gets its own signing identity, no long-lived token in your config. Find your owner ID at app.agentvalet.ai → Settings.

Confirm it loaded

Open Cursor’s MCP settings (the exact menu path varies by version). You should see agentvalet listed as connected, and in Agent mode its tools appear automatically.

Make your first governed call

Ask the agent to call list_platforms. It should return the platforms approved for this agent, an empty list at first, and that’s fine. What matters is that the call succeeds: your key signs correctly, the proxy is reachable, and the agent record is active.

From there, grant scopes for a platform you’ve connected in the dashboard and try a real call.